www.digitalshadows.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 06:b3:83:62:49:b0:77:32:db:34:26:ac:32:f8:bf:13 was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.digitalshadows.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:b3:83:62:49:b0:77:32:db:34:26:ac:32:f8:bf:13
Serial Number (int): 8907453895210973710614744700879945491
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 8f:a5:07:c0:ab:40:77:2e:7c:18:65:f7:0a:c3:82:a4:e5:f7:ed:d4
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 2b:9e:8c:9c:a3:0a:5f:16:cf:e9:e6:2c:4b:b2:e0:ba:55:dd:92:c3
Fingerprint (sha256): 2b:e7:b3:69:d0:33:17:3d:da:b9:b8:57:1d:be:d8:9d:be:aa:30:53:ca:ca:a9:30:21:64:d8:80:d2:c2:bc:6d

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate www.digitalshadows.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.digitalshadows.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.digitalshadows.com
www.digitalshadows.de
digitalshadows.de
www.digitalshadows.co.uk
digitalshadows.co.uk
digitalshadows.uk
www.digitalshadows.uk
digitalshadows.com

Other certificates including the domain name digitalshadows.com

(limited to 100 certificates)
ssl510648.cloudflaressl.com
ssl2520.cloudflare.com
status.sandsiv.com
ssl2520.cloudflare.com
blog.digitalshadows.com
mailer.digitalshadows.com
status.sandsiv.com
ssl2520.cloudflare.com
resources.digitalshadows.com
ssl2520.cloudflare.com
ssl510648.cloudflaressl.com
status.sandsiv.com
san3166.cdntwrk.com
mailer.digitalshadows.com
ssl2520.cloudflare.com
statuspage.e2open.com
ssl2520.cloudflare.com
status.sandsiv.com
partners.digitalshadows.com
ssl2520.cloudflare.com
*.integrations.digitalshadows.com
ssl2520.cloudflare.com
ssl326085.cloudflaressl.com
status.sandsiv.com
status-namer-gtassurancetool.gtil.gt.com
ssl2520.cloudflare.com
status.sandsiv.com
status.sandsiv.com
statuspage.e2open.com
ssl2520.cloudflare.com
www.digitalshadows.com
ssl279302.cloudflaressl.com
ssl279300.cloudflaressl.com
status.sandsiv.com
status-namer-gtassurancetool.gtil.gt.com
ssl279300.cloudflaressl.com
ssl2520.cloudflare.com
blog.digitalshadows.com
status-namer-gtassurancetool.gtil.gt.com
splunk.integrations.digitalshadows.com
ssl326083.cloudflaressl.com
www.digitalshadows.com
leapstatus.gtil.gt.com
san3232.cdntwrk.com
ssl510647.cloudflaressl.com
ssl510649.cloudflaressl.com
ssl2520.cloudflare.com
ssl279302.cloudflaressl.com
status.sandsiv.com
status.plataformasintese.com
san2210.cdntwrk.com
mailer.digitalshadows.com
*.analytics.digitalshadows.com
status.sandsiv.com
status.sandsiv.com
resources.digitalshadows.com
info.digitalshadows.com
resources.digitalshadows.com
status.sandsiv.com
www.digitalshadows.com
san3066.cdntwrk.com
partners.digitalshadows.com
info.digitalshadows.com
status.sandsiv.com
www.digitalshadows.com
ssl510647.cloudflaressl.com
ssl510649.cloudflaressl.com
partners.digitalshadows.com
ssl2520.cloudflare.com
status.sandsiv.com
ssl2520.cloudflare.com
info.digitalshadows.com
*.integrations.digitalshadows.com
ssl2520.cloudflare.com
status.sandsiv.com
blog.digitalshadows.com
ssl510648.cloudflaressl.com
status.plataformasintese.com
ssl279300.cloudflaressl.com
ssl279302.cloudflaressl.com
ssl2520.cloudflare.com
statuspage.e2open.com
san2784.cdntwrk.com
san2417.cdntwrk.com
dev17331wed2prod.relevantize.com
ssl279302.cloudflaressl.com
ssl279300.cloudflaressl.com
ssl2520.cloudflare.com
ssl2520.cloudflare.com
san2600.cdntwrk.com
ssl510649.cloudflaressl.com
status.sandsiv.com
ssl279302.cloudflaressl.com
leapstatus.gtil.gt.com
ssl2520.cloudflare.com
resources.digitalshadows.com
ssl279302.cloudflaressl.com
status.sandsiv.com
san1348.cdntwrk.com
*.analytics.digitalshadows.com

Certificate

The complete raw certificate details for www.digitalshadows.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviDIXOoic0oi+DYX+hDW
k7k++o9Tk2xKWFXMtOyHSDUUu5Jq10P2GJRcbMneSU16Xxr9oR4eBvmmtoE2qscc
uaLIjmP0pzyYwzKpV1li/fPOF/HaUN+JW7o92LkSKN/JfDbKSCQ+B3pKEmcnJXXS
uuJL1mJN5tB90kukvXVUuwsA3pF8ckhi0M+r9fwiG3TmtFhP3irJ3c1BYjq0h4ZV
OJXy05mTuax/9Llta0azy0RMmIzO4VBZKPkWJ5ruFD4/caSgm93NxrPf2UrxJGTl
/Ryg3WfkYiKp5xBLkUE/SdgWWN8s69LBU/naUL36nGyNteDoZb6B5unuAJQ/coWC
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8907453895210973710614744700879945491
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digitalshadows.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24001443679530847811670261125592590851684929667302321393063728010657338443386456534789149468055683787844304231314245261475004627159253454294025496037965141373652743466889550077866973870053577355475561341006080757946108299847714843208675581116240206710731417027572588220711747310575654492791313948026951114227562001332484277862882323052790135840271599129818747407190350866007667100638572067531765955048594505590490342057358094626647013668905577572459367262824290958480288896044534401391296084989731482689908552188803026005731631402280742450646305104848656875739865978788059340446982340633697361082622904983356927476421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8fa507c0ab40772e7c1865f70ac382a4e5f7edd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (179 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalshadows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalshadows.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalshadows.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalshadows.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalshadows.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalshadows.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalshadows.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalshadows.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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